uri.js project kayıtları
uri.js project üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-115 Misinterpretation of Input1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2021-27516İstismar yok | URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.uri.js project · uri.js | Yüksek7,5 | — | %2,4 | 21 Şub 2021 |
27İzleyin | CVE-2020-26291İstismar yok | Hostname spoofing in URI.jsuri.js project · uri.js · CWE-20 | Orta6,5 | — | %1,7 | 30 Ara 2020 |
26İzleyin | CVE-2022-0613İstismar yok | Authorization Bypass Through User-Controlled Key in medialize/uri.jsuri.js project · uri.js · CWE-639 | Orta6,5 | — | %1,5 | 16 Şub 2022 |
24İzleyin | CVE-2021-3647İstismar yok | Open Redirect in medialize/URI.jsuri.js project · uri.js · CWE-601 | Orta6,1 | — | %0,9 | 16 Tem 2021 |
24İzleyin | CVE-2022-1233İstismar yok | URL Confusion When Scheme Not Supplied in medialize/uri.jsuri.js project · uri.js · CWE-115 | Orta6,1 | — | %0,7 | 4 Nis 2022 |
24İzleyin | CVE-2022-0868İstismar yok | Open Redirect in medialize/uri.jsuri.js project · uri.js · CWE-601 | Orta6,1 | — | %0,7 | 6 Mar 2022 |
24İzleyin | CVE-2022-1243İstismar yok | CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.jsuri.js project · uri.js · CWE-20 | Orta6,1 | — | %0,6 | 5 Nis 2022 |
22İzleyin | CVE-2022-24723İstismar yok | Improper Input Validation in URI.jsuri.js project · uri.js · CWE-20 | Orta5,3 | — | %1,9 | 3 Mar 2022 |
- CVE-2021-2751631İzleyin
URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
YüksekCVSS 7,5İstismar yokEPSS %2uri.js project · uri.js21 Şub 2021
- CVE-2020-2629127İzleyin
Hostname spoofing in URI.js
OrtaCVSS 6,5İstismar yokEPSS %1uri.js project · uri.js30 Ara 2020
- CVE-2022-061326İzleyin
Authorization Bypass Through User-Controlled Key in medialize/uri.js
OrtaCVSS 6,5İstismar yokEPSS %1uri.js project · uri.js16 Şub 2022
- CVE-2021-364724İzleyin
Open Redirect in medialize/URI.js
OrtaCVSS 6,1İstismar yokEPSS %0uri.js project · uri.js16 Tem 2021
- CVE-2022-123324İzleyin
URL Confusion When Scheme Not Supplied in medialize/uri.js
OrtaCVSS 6,1İstismar yokEPSS %0uri.js project · uri.js4 Nis 2022
- CVE-2022-086824İzleyin
Open Redirect in medialize/uri.js
OrtaCVSS 6,1İstismar yokEPSS %0uri.js project · uri.js6 Mar 2022
- CVE-2022-124324İzleyin
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
OrtaCVSS 6,1İstismar yokEPSS %0uri.js project · uri.js5 Nis 2022
- CVE-2022-2472322İzleyin
Improper Input Validation in URI.js
OrtaCVSS 5,3İstismar yokEPSS %1uri.js project · uri.js3 Mar 2022